@xemahq/xema 0.13.0 → 0.15.0

package/dist/runtime/installation/current-launcher-renderer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"current-launcher-renderer.js","sourceRoot":"","sources":["../../../src/runtime/installation/current-launcher-renderer.ts"],"names":[],"mappings":";;AA8DA,8DAmBC;AAjFD,yCAKoB;AACpB,yCAIoB;AACpB,iDAAiF;AACjF,qDAG0B;AAC1B,2DAAqE;AAoCrE,MAAM,4BAA4B,GAAqC,IAAI,GAAG,CAAC;IAC7E,8BAAmB,CAAC,SAAS;IAC7B,8BAAmB,CAAC,OAAO;IAC3B,8BAAmB,CAAC,oBAAoB;CACzC,CAAC,CAAC;AAMH,SAAgB,yBAAyB,CACvC,YAAsC;IAEtC,+BAA+B,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAA,kDAA8B,EAAC,YAAY,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAA,wCAAuB,EAAC,YAAY,EAAE;QAClD,SAAS,EAAE;YACT,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;SACvE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;KACrD,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,mBAAmB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAChE,CAAC,CAAC,IAAA,mCAAoB,EAAC,YAAY,CAAC;QACpC,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,MAAM;QACN,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA4B;IACvD,OAAO,CACL,IAAA,sCAA2B,EAAC,OAAO,CAAC,CAAC,MAAM;QAC3C,iCAAsB,CAAC,YAAY,CACpC,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,YAAsC;IAEtC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,WAAW,CACT,WAAW,IAAI,CAAC,OAAO,2EAA2E,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,sCAA2B,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAKvD,IAAI,IAAI,CAAC,SAAS,CAAC,WAAW,KAAK,IAAA,sCAA2B,EAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7E,WAAW,CACT,yBAAyB,IAAI,CAAC,SAAS,CAAC,WAAW,eAAe,IAAI,CAAC,OAAO,EAAE,CACjF,CAAC;IACJ,CAAC;IAKD,IACE,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAC9B,CAAC;QACD,WAAW,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IAKD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC7C,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC3D,WAAW,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IAID,IACE,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,yBAAc,CAAC,MAAM;QAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,EACrC,CAAC;QACD,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,0BAA0B,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO;IACT,CAAC;IACD,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACxC,CAAC;AAOD,SAAS,0BAA0B,CACjC,IAAsC;IAUtC,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC/C,WAAW,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IAKD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1C,WAAW,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAOD,SAAS,qBAAqB,CAC5B,IAAsC,EACtC,QAAqC;IAErC,IACE,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa;QACtD,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAC5C,IAAI,CAAC,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QACxD,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;QAChD,IAAI,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,EACrC,CAAC;QACD,WAAW,CAAC,6BAA6B,CAAC,CAAC;IAC7C,CAAC;IAGD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,WAAW,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;IACD,IACE,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,UAAU;QAC1C,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,mBAAmB;QAC5D,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;QAChD,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;QAChD,IAAI,CAAC,QAAQ,CAAC,wBAAwB;YACpC,QAAQ,CAAC,wBAAwB;QACnC,IAAI,CAAC,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAChD,CAAC;QACD,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IACD,IACE,IAAI,CAAC,aAAa,CAAC,KAAK,KAAK,QAAQ,CAAC,aAAa;QACnD,IAAI,CAAC,aAAa,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAC/C,IAAI,CAAC,aAAa,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QAC/C,IAAI,CAAC,aAAa,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QACjD,IAAI,CAAC,aAAa,CAAC,aAAa,KAAK,QAAQ,CAAC,0BAA0B;QACxE,IAAI,CAAC,aAAa,CAAC,eAAe,KAAK,SAAS,EAChD,CAAC;QACD,WAAW,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IACD,IACE,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;QAClD,IAAI,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;QAClD,IAAI,CAAC,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;QAC5D,IAAI,CAAC,QAAQ,CAAC,qBAAqB,KAAK,QAAQ,CAAC,qBAAqB;QACtE,IAAI,CAAC,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,EACtC,CAAC;QACD,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAC5C,CAAC;IACD,IACE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,WAAW;QAC1C,IAAI,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,EAC7C,CAAC;QACD,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;IACD,IACE,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,YAAY;QAC5C,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe;QACzD,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,EAC1C,CAAC;QACD,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,IAAI,KAAK,CACb,8CAA8C,MAAM,sEAAsE,CAC3H,CAAC;AACJ,CAAC"}

package/dist/runtime/installation/diagnostics.d.ts

@@ -0,0 +1,16 @@
+export declare enum InstallationIssueKind {
+    Invalid = "invalid",
+    Unresolved = "unresolved",
+    Unsupported = "unsupported"
+}
+export interface InstallationIssue {
+    readonly kind: InstallationIssueKind;
+    readonly code: string;
+    readonly path: string;
+    readonly message: string;
+}
+export declare class InstallationCompilationError extends Error {
+    readonly issues: readonly InstallationIssue[];
+    constructor(issues: readonly InstallationIssue[]);
+}
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/runtime/installation/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/diagnostics.ts"],"names":[],"mappings":"AAAA,oBAAY,qBAAqB;IAC/B,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,WAAW,gBAAgB;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,SAAgB,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;gBAElC,MAAM,EAAE,SAAS,iBAAiB,EAAE;CASxD"}

package/dist/runtime/installation/diagnostics.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InstallationCompilationError = exports.InstallationIssueKind = void 0;
+var InstallationIssueKind;
+(function (InstallationIssueKind) {
+    InstallationIssueKind["Invalid"] = "invalid";
+    InstallationIssueKind["Unresolved"] = "unresolved";
+    InstallationIssueKind["Unsupported"] = "unsupported";
+})(InstallationIssueKind || (exports.InstallationIssueKind = InstallationIssueKind = {}));
+class InstallationCompilationError extends Error {
+    issues;
+    constructor(issues) {
+        super(`Invalid XemaInstallation: ${issues
+            .map((issue) => `[${issue.path}] ${issue.message}`)
+            .join('; ')}`);
+        this.name = 'InstallationCompilationError';
+        this.issues = issues;
+    }
+}
+exports.InstallationCompilationError = InstallationCompilationError;
+//# sourceMappingURL=diagnostics.js.map

package/dist/runtime/installation/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../../src/runtime/installation/diagnostics.ts"],"names":[],"mappings":";;;AAAA,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,4CAAmB,CAAA;IACnB,kDAAyB,CAAA;IACzB,oDAA2B,CAAA;AAC7B,CAAC,EAJW,qBAAqB,qCAArB,qBAAqB,QAIhC;AASD,MAAa,4BAA6B,SAAQ,KAAK;IACrC,MAAM,CAA+B;IAErD,YAAmB,MAAoC;QACrD,KAAK,CACH,6BAA6B,MAAM;aAChC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAZD,oEAYC"}

package/dist/runtime/installation/diff.d.ts

@@ -0,0 +1,32 @@
+import type { CompiledXemaInstallation } from './compiler';
+export declare enum InstallationChangeClass {
+    SafeInPlace = "safe-in-place",
+    RequiresRollout = "requires-rollout",
+    Destructive = "destructive",
+    Rejected = "rejected"
+}
+export declare enum InstallationRenderObligation {
+    RuntimeReconfigure = "runtime-reconfigure",
+    WorkloadRollout = "workload-rollout",
+    InfrastructureReconcile = "infrastructure-reconcile",
+    DataAndRecoveryReconcile = "data-and-recovery-reconcile",
+    ReplaceInstallation = "replace-installation"
+}
+export interface InstallationPlanChange {
+    readonly path: string;
+    readonly classification: InstallationChangeClass;
+    readonly renderObligation: InstallationRenderObligation;
+}
+export interface InstallationPlanDiff {
+    readonly classification: InstallationChangeClass;
+    readonly renderObligations: readonly InstallationRenderObligation[];
+    readonly changes: readonly InstallationPlanChange[];
+}
+export interface InstallationRenderAcknowledgement {
+    readonly obligation: InstallationRenderObligation;
+    readonly rendererId: string;
+    readonly effectivePlanHash: string;
+    readonly artifactDigest: string;
+}
+export declare function diffInstallationPlans(current: CompiledXemaInstallation, desired: CompiledXemaInstallation): InstallationPlanDiff;
+//# sourceMappingURL=diff.d.ts.map

package/dist/runtime/installation/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/diff.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAE3D,oBAAY,uBAAuB;IACjC,WAAW,kBAAkB;IAC7B,eAAe,qBAAqB;IACpC,WAAW,gBAAgB;IAC3B,QAAQ,aAAa;CACtB;AAED,oBAAY,4BAA4B;IACtC,kBAAkB,wBAAwB;IAC1C,eAAe,qBAAqB;IACpC,uBAAuB,6BAA6B;IACpD,wBAAwB,gCAAgC;IACxD,mBAAmB,yBAAyB;CAC7C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC;IACjD,QAAQ,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;CACzD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC;IACjD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACpE,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AASD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,wBAAwB,GAChC,oBAAoB,CAwBtB"}

package/dist/runtime/installation/diff.js

@@ -0,0 +1,136 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InstallationRenderObligation = exports.InstallationChangeClass = void 0;
+exports.diffInstallationPlans = diffInstallationPlans;
+const serialization_1 = require("./serialization");
+var InstallationChangeClass;
+(function (InstallationChangeClass) {
+    InstallationChangeClass["SafeInPlace"] = "safe-in-place";
+    InstallationChangeClass["RequiresRollout"] = "requires-rollout";
+    InstallationChangeClass["Destructive"] = "destructive";
+    InstallationChangeClass["Rejected"] = "rejected";
+})(InstallationChangeClass || (exports.InstallationChangeClass = InstallationChangeClass = {}));
+var InstallationRenderObligation;
+(function (InstallationRenderObligation) {
+    InstallationRenderObligation["RuntimeReconfigure"] = "runtime-reconfigure";
+    InstallationRenderObligation["WorkloadRollout"] = "workload-rollout";
+    InstallationRenderObligation["InfrastructureReconcile"] = "infrastructure-reconcile";
+    InstallationRenderObligation["DataAndRecoveryReconcile"] = "data-and-recovery-reconcile";
+    InstallationRenderObligation["ReplaceInstallation"] = "replace-installation";
+})(InstallationRenderObligation || (exports.InstallationRenderObligation = InstallationRenderObligation = {}));
+const CLASS_RANK = {
+    [InstallationChangeClass.SafeInPlace]: 0,
+    [InstallationChangeClass.RequiresRollout]: 1,
+    [InstallationChangeClass.Destructive]: 2,
+    [InstallationChangeClass.Rejected]: 3,
+};
+function diffInstallationPlans(current, desired) {
+    const paths = changedPaths(effectiveView(current), effectiveView(desired));
+    const changes = paths.map((path) => ({
+        path,
+        ...classifyChange(path, valueAtPath(current, path), valueAtPath(desired, path)),
+    }));
+    const classification = changes.reduce((highest, candidate) => CLASS_RANK[candidate.classification] > CLASS_RANK[highest]
+        ? candidate.classification
+        : highest, InstallationChangeClass.SafeInPlace);
+    return {
+        classification,
+        renderObligations: [
+            ...new Set(changes.map((candidate) => candidate.renderObligation)),
+        ].sort(),
+        changes,
+    };
+}
+function effectiveView(plan) {
+    return {
+        apiVersion: plan.apiVersion,
+        kind: plan.kind,
+        metadata: plan.metadata,
+        spec: plan.spec,
+    };
+}
+function changedPaths(current, desired, path = '') {
+    if (current === undefined || desired === undefined) {
+        return current === desired ? [] : [path];
+    }
+    if ((0, serialization_1.serializeInstallation)(current) === (0, serialization_1.serializeInstallation)(desired)) {
+        return [];
+    }
+    if (current === null ||
+        desired === null ||
+        typeof current !== 'object' ||
+        typeof desired !== 'object' ||
+        Array.isArray(current) ||
+        Array.isArray(desired)) {
+        return [path];
+    }
+    const left = current;
+    const right = desired;
+    const keys = new Set([...Object.keys(left), ...Object.keys(right)]);
+    return [...keys]
+        .sort()
+        .flatMap((key) => changedPaths(left[key], right[key], path.length === 0 ? key : `${path}.${key}`));
+}
+function classifyChange(path, current, desired) {
+    if (path === 'apiVersion' ||
+        path === 'kind' ||
+        path.startsWith('metadata.')) {
+        return change(InstallationChangeClass.Rejected, InstallationRenderObligation.ReplaceInstallation);
+    }
+    if (path === 'spec.profile' ||
+        path.startsWith('spec.target.') ||
+        path.startsWith('spec.operator.') ||
+        path === 'spec.infrastructure' ||
+        path.startsWith('spec.tenancy.') ||
+        path.startsWith('spec.security.')) {
+        return change(InstallationChangeClass.Destructive, InstallationRenderObligation.InfrastructureReconcile);
+    }
+    if (path.startsWith('spec.storage.') || path.startsWith('spec.recovery.')) {
+        return change(InstallationChangeClass.Destructive, InstallationRenderObligation.DataAndRecoveryReconcile);
+    }
+    if (path === 'spec.capacity.maxOrganizations' ||
+        path === 'spec.capacity.maxConcurrentSessions') {
+        return numericIncrease(current, desired)
+            ? change(InstallationChangeClass.SafeInPlace, InstallationRenderObligation.RuntimeReconfigure)
+            : change(InstallationChangeClass.Destructive, InstallationRenderObligation.InfrastructureReconcile);
+    }
+    if (path === 'spec.capacity.maxReplicas' ||
+        path === 'spec.capacity.minReplicas' ||
+        path === 'spec.capacity.zones') {
+        return change(numericIncrease(current, desired)
+            ? InstallationChangeClass.SafeInPlace
+            : InstallationChangeClass.RequiresRollout, InstallationRenderObligation.InfrastructureReconcile);
+    }
+    if (path.startsWith('spec.lifecycle.')) {
+        return change(InstallationChangeClass.RequiresRollout, InstallationRenderObligation.InfrastructureReconcile);
+    }
+    if (path.startsWith('spec.distribution.') ||
+        path.startsWith('spec.features.') ||
+        path === 'spec.secrets' ||
+        path === 'spec.domains' ||
+        path.startsWith('spec.observability.') ||
+        path === 'spec.sources' ||
+        path.startsWith('spec.upgrade.')) {
+        return change(InstallationChangeClass.RequiresRollout, InstallationRenderObligation.WorkloadRollout);
+    }
+    throw new Error(`Unclassified material installation field: ${path}`);
+}
+function change(classification, renderObligation) {
+    return { classification, renderObligation };
+}
+function numericIncrease(current, desired) {
+    return (typeof current === 'number' &&
+        typeof desired === 'number' &&
+        desired >= current);
+}
+function valueAtPath(value, path) {
+    let cursor = value;
+    for (const segment of path.split('.')) {
+        if (cursor === null || typeof cursor !== 'object') {
+            return undefined;
+        }
+        cursor = cursor[segment];
+    }
+    return cursor;
+}
+//# sourceMappingURL=diff.js.map

package/dist/runtime/installation/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../src/runtime/installation/diff.ts"],"names":[],"mappings":";;;AA6CA,sDA2BC;AAxED,mDAAwD;AAIxD,IAAY,uBAKX;AALD,WAAY,uBAAuB;IACjC,wDAA6B,CAAA;IAC7B,+DAAoC,CAAA;IACpC,sDAA2B,CAAA;IAC3B,gDAAqB,CAAA;AACvB,CAAC,EALW,uBAAuB,uCAAvB,uBAAuB,QAKlC;AAED,IAAY,4BAMX;AAND,WAAY,4BAA4B;IACtC,0EAA0C,CAAA;IAC1C,oEAAoC,CAAA;IACpC,oFAAoD,CAAA;IACpD,wFAAwD,CAAA;IACxD,4EAA4C,CAAA;AAC9C,CAAC,EANW,4BAA4B,4CAA5B,4BAA4B,QAMvC;AAqBD,MAAM,UAAU,GAAsD;IACpE,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;IACxC,CAAC,uBAAuB,CAAC,eAAe,CAAC,EAAE,CAAC;IAC5C,CAAC,uBAAuB,CAAC,WAAW,CAAC,EAAE,CAAC;IACxC,CAAC,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;CACtC,CAAC;AAEF,SAAgB,qBAAqB,CACnC,OAAiC,EACjC,OAAiC;IAEjC,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI;QACJ,GAAG,cAAc,CACf,IAAI,EACJ,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,EAC1B,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAC3B;KACF,CAAC,CAAC,CAAC;IACJ,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CACnC,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CACrB,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC;QACxD,CAAC,CAAC,SAAS,CAAC,cAAc;QAC1B,CAAC,CAAC,OAAO,EACb,uBAAuB,CAAC,WAAW,CACpC,CAAC;IACF,OAAO;QACL,cAAc;QACd,iBAAiB,EAAE;YACjB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;SACnE,CAAC,IAAI,EAAE;QACR,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,IAA8B;IACnD,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,OAAgB,EAChB,OAAgB,EAChB,IAAI,GAAG,EAAE;IAET,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACnD,OAAO,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAA,qCAAqB,EAAC,OAAO,CAAC,KAAK,IAAA,qCAAqB,EAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IACE,OAAO,KAAK,IAAI;QAChB,OAAO,KAAK,IAAI;QAChB,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,OAAO,KAAK,QAAQ;QAC3B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QACtB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EACtB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,OAA4C,CAAC;IAC1D,MAAM,KAAK,GAAG,OAA4C,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,IAAI,CAAC;SACb,IAAI,EAAE;SACN,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACf,YAAY,CACV,IAAI,CAAC,GAAG,CAAC,EACT,KAAK,CAAC,GAAG,CAAC,EACV,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAC3C,CACF,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CACrB,IAAY,EACZ,OAAgB,EAChB,OAAgB;IAEhB,IACE,IAAI,KAAK,YAAY;QACrB,IAAI,KAAK,MAAM;QACf,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAC5B,CAAC;QACD,OAAO,MAAM,CACX,uBAAuB,CAAC,QAAQ,EAChC,4BAA4B,CAAC,mBAAmB,CACjD,CAAC;IACJ,CAAC;IACD,IACE,IAAI,KAAK,cAAc;QACvB,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;QAC/B,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACjC,IAAI,KAAK,qBAAqB;QAC9B,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACjC,CAAC;QACD,OAAO,MAAM,CACX,uBAAuB,CAAC,WAAW,EACnC,4BAA4B,CAAC,uBAAuB,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1E,OAAO,MAAM,CACX,uBAAuB,CAAC,WAAW,EACnC,4BAA4B,CAAC,wBAAwB,CACtD,CAAC;IACJ,CAAC;IACD,IACE,IAAI,KAAK,gCAAgC;QACzC,IAAI,KAAK,qCAAqC,EAC9C,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC;YACtC,CAAC,CAAC,MAAM,CACJ,uBAAuB,CAAC,WAAW,EACnC,4BAA4B,CAAC,kBAAkB,CAChD;YACH,CAAC,CAAC,MAAM,CACJ,uBAAuB,CAAC,WAAW,EACnC,4BAA4B,CAAC,uBAAuB,CACrD,CAAC;IACR,CAAC;IACD,IACE,IAAI,KAAK,2BAA2B;QACpC,IAAI,KAAK,2BAA2B;QACpC,IAAI,KAAK,qBAAqB,EAC9B,CAAC;QACD,OAAO,MAAM,CACX,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC;YAC/B,CAAC,CAAC,uBAAuB,CAAC,WAAW;YACrC,CAAC,CAAC,uBAAuB,CAAC,eAAe,EAC3C,4BAA4B,CAAC,uBAAuB,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvC,OAAO,MAAM,CACX,uBAAuB,CAAC,eAAe,EACvC,4BAA4B,CAAC,uBAAuB,CACrD,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,UAAU,CAAC,oBAAoB,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACjC,IAAI,KAAK,cAAc;QACvB,IAAI,KAAK,cAAc;QACvB,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC;QACtC,IAAI,KAAK,cAAc;QACvB,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAChC,CAAC;QACD,OAAO,MAAM,CACX,uBAAuB,CAAC,eAAe,EACvC,4BAA4B,CAAC,eAAe,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,MAAM,CACb,cAAuC,EACvC,gBAA8C;IAE9C,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB,EAAE,OAAgB;IACzD,OAAO,CACL,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,IAAI,OAAO,CACnB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAAY;IAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAI,MAA4C,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/runtime/installation/format.d.ts

@@ -0,0 +1,3 @@
+import type { InstallationPlanResult } from './lifecycle';
+export declare function formatInstallationPlan(plan: InstallationPlanResult): string;
+//# sourceMappingURL=format.d.ts.map

package/dist/runtime/installation/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/format.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAoB3E"}

package/dist/runtime/installation/format.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatInstallationPlan = formatInstallationPlan;
+const support_bundle_1 = require("./support-bundle");
+function formatInstallationPlan(plan) {
+    const changes = plan.diff.changes.length === 0
+        ? '  = no changes'
+        : plan.diff.changes
+            .map((change) => `  ${change.classification.padEnd(17, ' ')} ${change.renderObligation.padEnd(27, ' ')} ${change.path}`)
+            .join('\n');
+    return [
+        `Installation: ${plan.desired.metadata.name}`,
+        `Effective hash: ${plan.desired.effectivePlanHash}`,
+        `Applied hash  : ${plan.applied?.effectivePlanHash ?? '<none>'}`,
+        `Change class: ${plan.diff.classification}`,
+        'Changes:',
+        changes,
+        'Desired (redacted):',
+        JSON.stringify((0, support_bundle_1.redactSupportValue)(plan.desired), null, 2),
+    ].join('\n');
+}
+//# sourceMappingURL=format.js.map

package/dist/runtime/installation/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../../src/runtime/installation/format.ts"],"names":[],"mappings":";;AAIA,wDAoBC;AAxBD,qDAAsD;AAItD,SAAgB,sBAAsB,CAAC,IAA4B;IACjE,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAC5B,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;aACd,GAAG,CACF,CAAC,MAAM,EAAE,EAAE,CACT,KAAK,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CACzG;aACA,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,OAAO;QACL,iBAAiB,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC7C,mBAAmB,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE;QACnD,mBAAmB,IAAI,CAAC,OAAO,EAAE,iBAAiB,IAAI,QAAQ,EAAE;QAChE,iBAAiB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;QAC3C,UAAU;QACV,OAAO;QACP,qBAAqB;QACrB,IAAI,CAAC,SAAS,CAAC,IAAA,mCAAkB,EAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;KAC1D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/runtime/installation/from-current-config.d.ts

@@ -0,0 +1,9 @@
+import { InstallationProfile, type LifecycleEnvironment, type XemaInstallation } from './contract';
+import { type XemaConfig } from '../config/schema';
+export interface CurrentConfigInstallationContext {
+    readonly installationId: string;
+    readonly profile?: InstallationProfile;
+    readonly environment?: LifecycleEnvironment;
+}
+export declare function installationFromCurrentConfig(config: XemaConfig, context: CurrentConfigInstallationContext): XemaInstallation;
+//# sourceMappingURL=from-current-config.d.ts.map

package/dist/runtime/installation/from-current-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"from-current-config.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/from-current-config.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,mBAAmB,EAMnB,KAAK,oBAAoB,EAEzB,KAAK,gBAAgB,EACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAKL,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAC;AAI1B,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,WAAW,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAOD,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE,gCAAgC,GACxC,gBAAgB,CAoFlB"}

package/dist/runtime/installation/from-current-config.js

@@ -0,0 +1,245 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.installationFromCurrentConfig = installationFromCurrentConfig;
+const compiler_1 = require("./compiler");
+const contract_1 = require("./contract");
+const serialization_1 = require("./serialization");
+const schema_1 = require("../config/schema");
+const infra_catalog_1 = require("../infra/infra-catalog");
+const schema_2 = require("../sources/schema");
+function installationFromCurrentConfig(config, context) {
+    const profile = context.profile ?? profileForSubstrate(config.app.substrate);
+    const sourceSecretNames = allocateSourceSecretNames(config);
+    const sourceSecrets = sourceSecretReferences(config.sources, sourceSecretNames);
+    const declaredSecrets = Object.entries(config.secrets).map(([name, secret]) => currentSecretBinding(name, secret.from, secret.env, secret.path));
+    return {
+        apiVersion: contract_1.XEMA_INSTALLATION_API_VERSION,
+        kind: contract_1.XEMA_INSTALLATION_KIND,
+        metadata: { name: context.installationId },
+        provenance: { sourceConfigHash: (0, serialization_1.hashInstallation)(config) },
+        spec: {
+            profile,
+            lifecycle: {
+                environment: context.environment ?? (0, compiler_1.profileLifecycleEnvironment)(profile),
+            },
+            distribution: {
+                kind: contract_1.DistributionReferenceKind.Edition,
+                edition: config.edition,
+            },
+            target: {
+                kind: targetForProfile(profile),
+            },
+            operator: {
+                kind: profile === contract_1.InstallationProfile.Developer
+                    ? contract_1.InstallationOperatorKind.Developer
+                    : profile === contract_1.InstallationProfile.HostedCell
+                        ? contract_1.InstallationOperatorKind.Platform
+                        : contract_1.InstallationOperatorKind.Organization,
+            },
+            features: {
+                ...featureSelection(config.app.include),
+                exclude: config.app.exclude,
+                enabled: config.app.features,
+                web: config.app.web.enabled,
+            },
+            infrastructure: infra_catalog_1.INFRA_COMPONENTS.map((component) => {
+                const current = config.infra[component] ?? {
+                    mode: schema_1.InfraMode.Managed,
+                };
+                return {
+                    component,
+                    ownership: current.mode,
+                    ...(current.url === undefined ? {} : { endpoint: current.url }),
+                    ...(current.secretRef === undefined
+                        ? {}
+                        : { secretRefs: [current.secretRef] }),
+                    ...(current.realm === undefined ? {} : { realm: current.realm }),
+                    ...(current.bucketPrefix === undefined
+                        ? {}
+                        : { bucketPrefix: current.bucketPrefix }),
+                    ...(current.persist?.path === undefined
+                        ? {}
+                        : { persistencePath: current.persist.path }),
+                };
+            }),
+            secrets: [...declaredSecrets, ...sourceSecrets],
+            security: {
+                managedModelAccess: config.policy?.allowedTiers ?? schema_1.LaunchAllowedTiers.Byok,
+            },
+            storage: {
+                ...(config.state.workspaces.driver === undefined
+                    ? {}
+                    : { workspaceDriver: config.state.workspaces.driver }),
+                ...(config.state.workspaces.path === undefined
+                    ? {}
+                    : { workspaceRoot: config.state.workspaces.path }),
+                ...(config.state.biomeMaterialization.path === undefined
+                    ? {}
+                    : {
+                        materializationRoot: config.state.biomeMaterialization.path,
+                    }),
+            },
+            sources: config.sources.map((source) => toInstallationSource(source, sourceSecretNames)),
+        },
+    };
+}
+function profileForSubstrate(substrate) {
+    switch (substrate) {
+        case schema_1.Substrate.Native:
+            return contract_1.InstallationProfile.Developer;
+        case schema_1.Substrate.Container:
+            return contract_1.InstallationProfile.Starter;
+        case schema_1.Substrate.Helm:
+            return contract_1.InstallationProfile.SingleNodeProduction;
+    }
+}
+function targetForProfile(profile) {
+    switch (profile) {
+        case contract_1.InstallationProfile.Developer:
+        case contract_1.InstallationProfile.Starter:
+            return contract_1.InstallationTargetKind.LocalMachine;
+        case contract_1.InstallationProfile.SingleNodeProduction:
+            return contract_1.InstallationTargetKind.SingleNodeKubernetes;
+        case contract_1.InstallationProfile.BusinessHa:
+        case contract_1.InstallationProfile.EnterpriseRegulated:
+            return contract_1.InstallationTargetKind.CustomerKubernetes;
+        case contract_1.InstallationProfile.HostedCell:
+            return contract_1.InstallationTargetKind.HostedCell;
+    }
+}
+function featureSelection(include) {
+    if (Array.isArray(include)) {
+        return {
+            selection: contract_1.FeatureSelectionMode.Explicit,
+            include: [...include],
+        };
+    }
+    switch (include) {
+        case 'minimal':
+            return { selection: contract_1.FeatureSelectionMode.Minimal, include: [] };
+        case 'default':
+            return { selection: contract_1.FeatureSelectionMode.Default, include: [] };
+        case 'all':
+            return { selection: contract_1.FeatureSelectionMode.All, include: [] };
+    }
+}
+function currentSecretBinding(name, source, env, path) {
+    switch (source) {
+        case schema_1.SecretSource.Env:
+            return {
+                name,
+                provider: contract_1.SecretReferenceProvider.Environment,
+                workflow: contract_1.DeveloperSecretWorkflow.Interactive,
+                variable: env ?? name,
+            };
+        case schema_1.SecretSource.File:
+            if (path === undefined) {
+                throw new Error(`File secret "${name}" requires a path.`);
+            }
+            return {
+                name,
+                provider: contract_1.SecretReferenceProvider.File,
+                workflow: contract_1.DeveloperSecretWorkflow.Interactive,
+                path,
+            };
+        case schema_1.SecretSource.Prompt:
+            return {
+                name,
+                provider: contract_1.SecretReferenceProvider.Prompt,
+                workflow: contract_1.DeveloperSecretWorkflow.Interactive,
+                promptId: name,
+            };
+    }
+}
+function sourceSecretReferences(sources, names) {
+    return sources.flatMap((source) => {
+        if (!('authTokenEnv' in source) || source.authTokenEnv === undefined) {
+            return [];
+        }
+        return [
+            {
+                name: requiredSourceSecretName(source, names),
+                provider: contract_1.SecretReferenceProvider.Environment,
+                workflow: contract_1.DeveloperSecretWorkflow.Interactive,
+                variable: source.authTokenEnv,
+            },
+        ];
+    });
+}
+function toInstallationSource(source, names) {
+    const authSecretRef = 'authTokenEnv' in source && source.authTokenEnv !== undefined
+        ? requiredSourceSecretName(source, names)
+        : undefined;
+    switch (source.kind) {
+        case schema_2.SourceKind.Workspace:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Workspace,
+                ...(source.root === undefined ? {} : { root: source.root }),
+            };
+        case schema_2.SourceKind.Distribution:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Distribution,
+                edition: source.edition,
+                ...(source.ref === undefined ? {} : { ref: source.ref }),
+            };
+        case schema_2.SourceKind.Npm:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Npm,
+                ...(source.registryUrl === undefined
+                    ? {}
+                    : { registryUrl: source.registryUrl }),
+                ...(source.scope === undefined ? {} : { scope: source.scope }),
+                ...(authSecretRef === undefined ? {} : { authSecretRef }),
+            };
+        case schema_2.SourceKind.Oci:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Oci,
+                registry: source.registry,
+                ...(authSecretRef === undefined ? {} : { authSecretRef }),
+            };
+        case schema_2.SourceKind.Git:
+            return {
+                name: source.name,
+                kind: contract_1.SourceBindingKind.Git,
+                url: source.url,
+                ...(source.ref === undefined ? {} : { ref: source.ref }),
+                ...(authSecretRef === undefined ? {} : { authSecretRef }),
+            };
+    }
+}
+function allocateSourceSecretNames(config) {
+    const allocated = new Set(Object.keys(config.secrets));
+    const names = new Map();
+    for (const source of config.sources) {
+        if (!('authTokenEnv' in source) || source.authTokenEnv === undefined) {
+            continue;
+        }
+        for (let nonce = 0;; nonce += 1) {
+            const digest = (0, serialization_1.hashInstallation)({
+                source: source.name,
+                kind: source.kind,
+                variable: source.authTokenEnv,
+                nonce,
+            });
+            const candidate = `xema-source-auth-${digest}`;
+            if (!allocated.has(candidate)) {
+                allocated.add(candidate);
+                names.set(source, candidate);
+                break;
+            }
+        }
+    }
+    return names;
+}
+function requiredSourceSecretName(source, names) {
+    const name = names.get(source);
+    if (name === undefined) {
+        throw new Error(`Internal source-secret allocation is missing for source "${source.name}".`);
+    }
+    return name;
+}
+//# sourceMappingURL=from-current-config.js.map

package/dist/runtime/installation/from-current-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"from-current-config.js","sourceRoot":"","sources":["../../../src/runtime/installation/from-current-config.ts"],"names":[],"mappings":";;AAsCA,sEAuFC;AA7HD,yCAAyD;AACzD,yCAcoB;AACpB,mDAAmD;AACnD,6CAM0B;AAC1B,0DAA0D;AAC1D,8CAAgE;AAahE,SAAgB,6BAA6B,CAC3C,MAAkB,EAClB,OAAyC;IAEzC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7E,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,sBAAsB,CAC1C,MAAM,CAAC,OAAO,EACd,iBAAiB,CAClB,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAC5E,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CACjE,CAAC;IACF,OAAO;QACL,UAAU,EAAE,wCAA6B;QACzC,IAAI,EAAE,iCAAsB;QAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,cAAc,EAAE;QAC1C,UAAU,EAAE,EAAE,gBAAgB,EAAE,IAAA,gCAAgB,EAAC,MAAM,CAAC,EAAE;QAC1D,IAAI,EAAE;YACJ,OAAO;YACP,SAAS,EAAE;gBACT,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAA,sCAA2B,EAAC,OAAO,CAAC;aACzE;YACD,YAAY,EAAE;gBACZ,IAAI,EAAE,oCAAyB,CAAC,OAAO;gBACvC,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB;YACD,MAAM,EAAE;gBACN,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC;aAChC;YACD,QAAQ,EAAE;gBACR,IAAI,EACF,OAAO,KAAK,8BAAmB,CAAC,SAAS;oBACvC,CAAC,CAAC,mCAAwB,CAAC,SAAS;oBACpC,CAAC,CAAC,OAAO,KAAK,8BAAmB,CAAC,UAAU;wBAC1C,CAAC,CAAC,mCAAwB,CAAC,QAAQ;wBACnC,CAAC,CAAC,mCAAwB,CAAC,YAAY;aAC9C;YACD,QAAQ,EAAE;gBACR,GAAG,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC;gBACvC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO;gBAC3B,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ;gBAC5B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO;aAC5B;YACD,cAAc,EAAE,gCAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;gBACjD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI;oBACzC,IAAI,EAAE,kBAAS,CAAC,OAAO;iBACxB,CAAC;gBACF,OAAO;oBACL,SAAS;oBACT,SAAS,EAAE,OAAO,CAAC,IAAI;oBACvB,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;oBAC/D,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;wBACjC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;oBAChE,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;wBACpC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;oBAC3C,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS;wBACrC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;iBAC/C,CAAC;YACJ,CAAC,CAAC;YACF,OAAO,EAAE,CAAC,GAAG,eAAe,EAAE,GAAG,aAAa,CAAC;YAC/C,QAAQ,EAAE;gBACR,kBAAkB,EAChB,MAAM,CAAC,MAAM,EAAE,YAAY,IAAI,2BAAkB,CAAC,IAAI;aACzD;YACD,OAAO,EAAE;gBACP,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;oBAC9C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,SAAS;oBAC5C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACpD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,KAAK,SAAS;oBACtD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;wBACE,mBAAmB,EAAE,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI;qBAC5D,CAAC;aACP;YACD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACrC,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAChD;SACF;KACF,CAAC;AACJ,CAAC;AAiBD,SAAS,mBAAmB,CAAC,SAAoB;IAC/C,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,kBAAS,CAAC,MAAM;YACnB,OAAO,8BAAmB,CAAC,SAAS,CAAC;QACvC,KAAK,kBAAS,CAAC,SAAS;YACtB,OAAO,8BAAmB,CAAC,OAAO,CAAC;QACrC,KAAK,kBAAS,CAAC,IAAI;YACjB,OAAO,8BAAmB,CAAC,oBAAoB,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA4B;IAE5B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,8BAAmB,CAAC,SAAS,CAAC;QACnC,KAAK,8BAAmB,CAAC,OAAO;YAC9B,OAAO,iCAAsB,CAAC,YAAY,CAAC;QAC7C,KAAK,8BAAmB,CAAC,oBAAoB;YAC3C,OAAO,iCAAsB,CAAC,oBAAoB,CAAC;QACrD,KAAK,8BAAmB,CAAC,UAAU,CAAC;QACpC,KAAK,8BAAmB,CAAC,mBAAmB;YAC1C,OAAO,iCAAsB,CAAC,kBAAkB,CAAC;QACnD,KAAK,8BAAmB,CAAC,UAAU;YACjC,OAAO,iCAAsB,CAAC,UAAU,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAqC;IAI7D,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,SAAS,EAAE,+BAAoB,CAAC,QAAQ;YACxC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;SACtB,CAAC;IACJ,CAAC;IACD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,EAAE,SAAS,EAAE,+BAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAClE,KAAK,SAAS;YACZ,OAAO,EAAE,SAAS,EAAE,+BAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAClE,KAAK,KAAK;YACR,OAAO,EAAE,SAAS,EAAE,+BAAoB,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAY,EACZ,MAAoB,EACpB,GAAuB,EACvB,IAAwB;IAExB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,qBAAY,CAAC,GAAG;YACnB,OAAO;gBACL,IAAI;gBACJ,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,GAAG,IAAI,IAAI;aACtB,CAAC;QACJ,KAAK,qBAAY,CAAC,IAAI;YACpB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,oBAAoB,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO;gBACL,IAAI;gBACJ,QAAQ,EAAE,kCAAuB,CAAC,IAAI;gBACtC,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,IAAI;aACL,CAAC;QACJ,KAAK,qBAAY,CAAC,MAAM;YACtB,OAAO;gBACL,IAAI;gBACJ,QAAQ,EAAE,kCAAuB,CAAC,MAAM;gBACxC,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,IAAI;aACf,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA8B,EAC9B,KAAsC;IAOtC,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAChC,IAAI,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO;YACL;gBACE,IAAI,EAAE,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC;gBAC7C,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,kCAAuB,CAAC,WAAW;gBAC7C,QAAQ,EAAE,MAAM,CAAC,YAAY;aAC9B;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAkB,EAClB,KAAsC;IAEtC,MAAM,aAAa,GACjB,cAAc,IAAI,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAC3D,CAAC,CAAC,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC;QACzC,CAAC,CAAC,SAAS,CAAC;IAChB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,mBAAU,CAAC,SAAS;YACvB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,SAAS;gBACjC,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;aAC5D,CAAC;QACJ,KAAK,mBAAU,CAAC,YAAY;YAC1B,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,YAAY;gBACpC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;aACzD,CAAC;QACJ,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,GAAG;gBAC3B,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;oBAClC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC9D,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;aAC1D,CAAC;QACJ,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,GAAG;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;aAC1D,CAAC;QACJ,KAAK,mBAAU,CAAC,GAAG;YACjB,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,IAAI,EAAE,4BAAiB,CAAC,GAAG;gBAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;gBACxD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;aAC1D,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAChC,MAAkB;IAElB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACrE,SAAS;QACX,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,GAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAA,gCAAgB,EAAC;gBAC9B,MAAM,EAAE,MAAM,CAAC,IAAI;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,YAAY;gBAC7B,KAAK;aACN,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,oBAAoB,MAAM,EAAE,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACzB,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBAC7B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAkB,EAClB,KAAsC;IAEtC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,4DAA4D,MAAM,CAAC,IAAI,IAAI,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/runtime/installation/helm-release-readiness.d.ts

@@ -0,0 +1,9 @@
+import { type InstallationReadinessExpectation, type InstallationReadinessObserver, type InstallationReadinessProof } from './readiness-proof';
+import { HelmCli } from '../runner/helm-cli';
+export declare class HelmReleaseReadinessObserver implements InstallationReadinessObserver {
+    private readonly helmFor;
+    constructor(helmFor?: (namespace: string) => HelmCli);
+    observe(expectation: InstallationReadinessExpectation): Promise<InstallationReadinessProof>;
+    private collectOwnedReleases;
+}
+//# sourceMappingURL=helm-release-readiness.d.ts.map

package/dist/runtime/installation/helm-release-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"helm-release-readiness.d.ts","sourceRoot":"","sources":["../../../src/runtime/installation/helm-release-readiness.ts"],"names":[],"mappings":"AAIA,OAAO,EAQL,KAAK,gCAAgC,EAErC,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAEhC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,OAAO,EAAqB,MAAM,oBAAoB,CAAC;AAwBhE,qBAAa,4BACX,YAAW,6BAA6B;IAGtC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OACrB;IAGjB,OAAO,CAClB,WAAW,EAAE,gCAAgC,GAC5C,OAAO,CAAC,0BAA0B,CAAC;YAmGxB,oBAAoB;CAUnC"}